Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: HjvC9ecPfeiy0WYCa1EvTwTX2cAbWnk4LC7K5l5rpDI=
Subject key identifier: EA:CA:A9:34:C9:26:A2:6D:14:A5:96:05:A1:F8:86:76:40:61:0C:DB
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 01989CA71CE59C6B3B9114DDF3BB5A9A8E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 0D03
Signing time: Tue 12 Aug 2025 05:00:54 +0000
Manifest this update: Tue 12 Aug 2025 05:00:54 +0000
Manifest next update: Wed 13 Aug 2025 05:00:54 +0000
Files and hashes: 1: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (hash: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: +IURzSFkFJ5+C8hg3hoM10Lh5eknsJxU5QtkZKRVjCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a7:1c:e5:9c:6b:3b:91:14:dd:f3:bb:5a:9a:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Aug 12 05:00:54 2025 GMT
Not After : Aug 13 05:00:54 2025 GMT
Subject: CN=eacaa934c926a26d14a59605a1f8867640610cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:ea:38:cd:0f:ef:29:d2:fb:93:55:4a:2b:
e0:8d:ed:26:fa:07:7e:d8:3c:f0:f5:52:54:a0:d2:
63:cf:4a:99:21:a4:69:12:86:9f:81:f5:8a:d6:0d:
07:5c:e3:0b:1f:63:a0:17:f8:58:61:e7:a0:f3:c6:
64:10:3c:7c:20:a0:dd:7c:dc:22:5f:d8:e5:02:4d:
54:e6:88:62:1f:d8:75:02:26:1b:d8:14:81:44:ee:
03:60:1a:82:86:f8:0f:f4:85:0e:b1:07:a4:44:6d:
5a:57:66:b3:5a:c5:b3:e5:bd:eb:bb:a5:de:85:43:
43:8c:0b:ed:18:df:00:56:52:de:27:d0:07:eb:35:
10:18:7e:f9:ca:32:67:76:96:5b:3b:e0:65:35:ba:
0c:9f:d5:39:96:86:14:57:d5:0b:e9:98:a6:cc:a5:
a8:10:1b:6a:83:d9:bd:02:79:ea:a2:f4:7f:eb:86:
1d:52:fc:75:29:ed:a0:44:8f:18:9f:96:c5:d2:c8:
7b:0c:e0:f3:c7:36:0c:90:dc:a2:13:27:4a:96:57:
6d:37:21:e6:7b:61:9d:8d:5f:f2:6b:b1:13:5f:4d:
43:96:26:2a:e5:03:60:5b:ba:f5:95:e5:d9:2c:df:
30:02:60:b8:20:ad:0d:c3:b6:dd:57:0d:f3:14:f6:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:A9:34:C9:26:A2:6D:14:A5:96:05:A1:F8:86:76:40:61:0C:DB
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:29:ec:d8:cd:96:5f:b4:6d:66:8b:bc:11:98:ab:a8:eb:
b5:b6:2c:de:9f:e4:39:f4:a3:71:ab:5e:86:03:0d:3a:ab:40:
e7:9f:e4:c7:64:f1:06:c7:af:3e:56:a3:39:ac:b1:c9:5f:77:
d5:eb:8e:b1:65:ac:9c:2b:a4:c7:92:f0:38:da:8c:a3:01:eb:
35:fa:21:1b:59:e3:cc:d1:d4:75:81:cb:71:37:57:58:e2:a5:
12:52:3c:89:7f:38:5f:19:81:a6:b9:18:bf:12:26:5f:95:59:
df:8c:d0:05:92:40:22:cd:d2:5b:72:e9:30:f4:42:63:d1:fa:
e4:f0:2f:81:ac:57:14:70:39:65:33:f9:14:ec:72:97:6f:67:
1a:7f:3f:c8:de:ab:28:b6:d9:d1:35:01:98:c5:13:11:0a:5b:
ca:5e:39:ae:0c:c7:7c:a0:4e:20:d8:34:07:41:ce:a5:0e:54:
b1:4d:fe:a0:94:bc:75:78:05:0d:a5:57:57:cd:62:ad:d3:2d:
23:62:e6:fb:2c:c1:92:9a:95:d5:1a:2f:e2:ea:fa:70:4b:92:
22:df:9e:c2:6c:2f:b5:ff:a6:33:82:22:63:21:05:b4:f6:50:
cf:ca:dd:df:3c:c5:55:a9:9c:9f:53:12:86:58:67:35:49:f3:
ac:f9:29:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZicpxzlnGs7kRTd87tamo5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGQyMzU2OTNmNjg2N2M1YjM4MTNkYTFmMzZmZTEwN2Jk
MWQ3ODIwHhcNMjUwODEyMDUwMDU0WhcNMjUwODEzMDUwMDU0WjAzMTEwLwYDVQQD
EyhlYWNhYTkzNGM5MjZhMjZkMTRhNTk2MDVhMWY4ODY3NjQwNjEwY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfXqOM0P7ynS+5NVSivgje0m+gd+
2Dzw9VJUoNJjz0qZIaRpEoafgfWK1g0HXOMLH2OgF/hYYeeg88ZkEDx8IKDdfNwi
X9jlAk1U5ohiH9h1AiYb2BSBRO4DYBqChvgP9IUOsQekRG1aV2azWsWz5b3ru6Xe
hUNDjAvtGN8AVlLeJ9AH6zUQGH75yjJndpZbO+BlNboMn9U5loYUV9UL6ZimzKWo
EBtqg9m9AnnqovR/64YdUvx1Ke2gRI8Yn5bF0sh7DODzxzYMkNyiEydKlldtNyHm
e2GdjV/ya7ETX01DliYq5QNgW7r1leXZLN8wAmC4IK0Nw7bdVw3zFPZKGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrKqTTJJqJtFKWWBaH4hnZAYQzbMB8GA1UdIwQY
MBaAFHaNI1aT9oZ8WzgT2h82/hB70deCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTIwZWYtMTQzMC00NWVhLWI3N2Yt
ZTM3NmI5MjQyZWE3LzEvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTIwZWYtMTQzMC00NWVhLWI3N2YtZTM3NmI5MjQyZWE3
LzEvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgcp7NjN
ll+0bWaLvBGYq6jrtbYs3p/kOfSjcatehgMNOqtA55/kx2TxBsevPlajOayxyV93
1euOsWWsnCukx5LwONqMowHrNfohG1njzNHUdYHLcTdXWOKlElI8iX84XxmBprkY
vxImX5VZ34zQBZJAIs3SW3LpMPRCY9H65PAvgaxXFHA5ZTP5FOxyl29nGn8/yN6r
KLbZ0TUBmMUTEQpbyl45rgzHfKBOINg0B0HOpQ5UsU3+oJS8dXgFDaVXV81irdMt
I2Lm+yzBkpqV1Rov4ur6cEuSIt+ewmwvtf+mM4IiYyEFtPZQz8rd3zzFVamcn1MS
hlhnNUnzrPkpgw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:55 2025 by rpki-client